YOUR TV BOX HAS A SECOND JOB

The real news

The story, straight

A TV streaming box connects your television to the internet. A backdoor is hidden software that lets someone else control that box.

Link infected devices together and you have a botnet: a remotely controlled network.

Your remote changes channels. Their remote installs malware.

Apparently this household has joint custody.

In its 2 November report, Google says XCPE enrolled more than 1.3 million set-top boxes. These were mostly Android TV set-top boxes; Google also found the backdoor on telehealth devices, karaoke machines and digital signage.

Google assesses with high confidence that manufacturer Videostrong Technology Co. intentionally developed, deployed and operated the backdoor for financial gain. That is Google's assessment, not a reported criminal conviction.

Criminal affiliates used access for fake advertising activity, additional malware and residential proxies.

A residential proxy sends someone else's traffic through a real home's internet address, making it look like ordinary household activity that online services are more likely to trust, as TrendAI explains. Think of strangers borrowing your return address without asking.

Google and partners disrupted the control infrastructure, and Google banned Videostrong from making certified Android devices. But the malware remains.

Google says it is built into the device's underlying software and reinstalls itself after deletion when the box restarts.

The useful move: disconnect an affected box from the internet. BleepingComputer reports that removal requires clean replacement system software, not merely deleting an app.

Disrupting the landlord does not evict the criminal roommates.

Repost this before someone's streaming box picks up another shift.

Thanks for supporting Lil'meme. Your support is appreciated.